Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33372e302f32342d3234203d3e203538343939.roa
File:                     3130332e31352e33372e302f32342d3234203d3e203538343939.roa (raw, json)
Hash identifier:          yd/9tWo1kJ6YHfykCLdu2BeP/tNNzdmE7/w//Rilq70=
Subject key identifier:   09:18:B5:8E:81:45:A6:36:A3:90:2F:08:14:1B:42:5C:31:CF:67:0A
Certificate issuer:       /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Certificate serial:       2273138985FECC10B536294ABE5D883E80D3E156
Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33372e302f32342d3234203d3e203538343939.roa
Signing time:             Mon 01 Jul 2024 01:02:40 +0000
ROA not before:           Mon 01 Jul 2024 00:57:40 +0000
ROA not after:            Mon 30 Jun 2025 01:02:40 +0000
asID:                     58499
IP address blocks:        103.15.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl
                          rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:73:13:89:85:fe:cc:10:b5:36:29:4a:be:5d:88:3e:80:d3:e1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
        Validity
            Not Before: Jul  1 00:57:40 2024 GMT
            Not After : Jun 30 01:02:40 2025 GMT
        Subject: CN=0918B58E8145A636A3902F08141B425C31CF670A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:ce:ed:9d:e9:a0:48:bd:99:09:16:06:c4:
                    64:ad:24:fa:da:3d:aa:a3:2f:73:c7:16:0e:5e:4d:
                    04:e0:a1:a5:4a:47:3b:a3:b5:c6:c7:1e:4d:58:fb:
                    03:42:9b:43:fe:9f:ad:21:b1:7c:d0:8b:0d:8c:1d:
                    46:a7:a3:5d:21:e4:71:5e:6a:33:4f:0f:82:16:8f:
                    9a:fd:51:c3:14:70:3e:7b:d7:4b:6d:5c:b0:a4:39:
                    ae:fb:68:b0:59:51:bb:09:25:1a:c7:0c:02:b2:85:
                    c9:60:07:2e:31:9b:11:e4:a5:a2:0f:18:e8:ab:dd:
                    d6:62:1a:20:91:c6:a7:b9:cc:d9:90:69:f9:b4:a9:
                    42:b9:18:b1:e2:e7:d3:ae:31:15:10:d4:a0:a7:58:
                    ca:4c:42:b1:91:e1:18:8f:77:a9:41:5f:54:38:d8:
                    ca:ba:0c:87:32:a2:7e:5e:e5:ab:3c:92:6f:9f:61:
                    76:06:a5:8c:7f:f0:45:6a:c3:af:bf:6b:9b:dc:ac:
                    a3:ba:50:0e:63:e7:f1:f0:89:01:c9:e4:f1:0c:c2:
                    12:03:4e:77:c2:5c:ac:97:ff:24:39:2b:da:0b:03:
                    18:a6:8c:ef:3a:4d:3d:1b:4b:d4:8b:ce:81:48:f8:
                    7f:f4:8c:84:d8:56:c2:e9:88:ad:f5:36:f5:8b:e0:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:B5:8E:81:45:A6:36:A3:90:2F:08:14:1B:42:5C:31:CF:67:0A
            X509v3 Authority Key Identifier:
                keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33372e302f32342d3234203d3e203538343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:34:c0:30:ee:af:72:38:f2:7e:9c:47:20:93:a0:fb:a7:93:
         f3:d6:4e:65:e1:c3:c1:c1:3f:da:96:4b:cf:89:af:9f:5d:fa:
         9f:d2:68:e6:17:36:ad:8a:31:0e:79:80:36:f5:fa:84:8a:90:
         47:88:97:dd:ee:be:25:18:18:6a:76:72:a9:b8:8b:90:87:87:
         a8:31:b2:f4:e8:db:e8:78:dc:e5:56:e4:e0:95:fc:19:06:42:
         62:b1:24:64:4e:15:2a:9f:5f:90:23:3e:da:b7:c4:e1:a3:0f:
         02:03:a6:97:a1:16:2c:ac:af:48:86:85:cc:20:72:df:16:97:
         a6:da:93:e5:2d:20:fa:96:59:af:c0:18:61:05:ee:81:ba:42:
         3e:56:28:6e:5d:48:b4:0d:da:56:08:4c:4c:25:55:86:fe:4d:
         1c:1f:ad:b7:cc:ba:b3:f3:d3:6a:b0:bf:4c:d1:26:01:3a:74:
         e7:ee:9f:58:79:c5:e7:f3:9e:4a:39:70:24:5b:2d:3f:d4:c9:
         8c:67:50:d9:e9:7e:05:39:e8:37:02:72:36:b9:d5:34:23:0f:
         5b:7c:19:5b:2b:14:6c:2d:55:e9:8a:6a:95:13:a3:93:8f:c0:
         74:61:08:d9:05:32:fc:24:ca:e9:d6:c0:37:97:bf:cf:c3:a0:
         2a:e2:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org